Privacy policy

Who we are

Fabprints is responsible for the personal information used to operate this website, manage customer accounts, respond to enquiries and fulfil orders. You can contact us using the email address above or the website contact form.

Information we use

When you contact us, we receive your name, email address, message and any information you choose to include. When you create an account, we use your name, verified email address, a protected password hash, your email preferences and account notifications. We also keep records of consent choices and account security requests.

Shopping uses a session identifier and basket contents. Order records include the items, quantities, amount, payment status and payment reference. Orders placed while logged in are linked to your customer account. Guest checkout does not require a customer account.

Stripe handles checkout and payment details, including the billing or delivery information and phone number requested at checkout. Our website receives payment confirmation and order information; it does not store full card numbers or card security codes. We may access order and delivery details through our payment provider to fulfil your purchase.

Security controls use limited request records, including hashed identifiers derived from an email address or IP address. Hosting services may also keep technical logs such as IP addresses, timestamps, requested pages and device or browser information.

Why we use information

Accounts, purchases and delivery: to provide the services you request and perform our contract with you, or take steps you request before a contract.

Enquiries: to respond to your request, including pre-contract questions, or for our legitimate interest in providing customer support.

Security and service administration: for our legitimate interests in protecting customers, preventing abuse, keeping records of preferences and running a reliable service.

Accounting and other required records: to meet applicable legal obligations.

Newsletters, offers and blog emails: with your consent. These choices are optional and are not required to buy from us or create an account. Necessary account and order messages are separate from marketing.

Your email choices

You can change newsletter and blog-email choices in your account or use the unsubscribe link in a marketing email. Withdrawing consent stops future marketing on that basis; it does not affect earlier lawful use. We retain limited preference or suppression records to respect your choice. Account notifications can also be turned off in your account settings.

Who receives information

Information is available to authorised people running Fabprints and to service providers needed for the service, such as website hosting, email delivery and payment processing. Delivery services receive the details needed to deliver an order. We may also disclose relevant records to professional advisers, authorities or other parties where necessary to meet legal duties or handle a dispute. We do not sell customer personal information.

Stripe's privacy policy explains its payment services, fraud checks, recipients and international processing. Our hosting and email arrangements may also involve processing outside the UK. Contact us for details of the providers and locations used for your information and any relevant transfer safeguards.

How long we keep information

Account details are kept while the account is in use. If you ask to close it, we review what can be deleted and what must be retained for outstanding orders, disputes, security or legal duties.

Order and payment records are kept for the accounting, tax and claim-handling requirements that apply to the business. Enquiries are kept for the time needed to answer them and deal with relevant follow-up or disputes. Marketing preference records are kept for as long as needed to administer your choices and demonstrate how consent was obtained or withdrawn.

Verification links expire after 24 hours and password-reset links after one hour. Expiry prevents use of the link; it does not itself erase all associated request or email-queue records. Technical records are retained according to their security purpose and the hosting provider's arrangements. Backup copies may remain until those copies expire. Contact us for more information or to request deletion of information we no longer need.

Your rights

Depending on the circumstances, you can ask to access or correct your information, request deletion or restricted use, object to processing, or receive a portable copy. You can withdraw marketing consent at any time and object to direct marketing. Some records may need to be kept to comply with legal duties or establish or defend claims.

Email us or use the contact form to make a request. We may need to verify your identity before disclosing or changing records. You can complain to the UK Information Commissioner's Office (ICO), including if you are unhappy with our response.

Cookies and updates

Our cookie policy explains the session cookie used for shopping, login and security. We update this notice when our service or data use changes. The last-updated date is shown above.